Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3aee3545-8ea1-350c-8306-fefeeb50bccd.roa
File:                     3aee3545-8ea1-350c-8306-fefeeb50bccd.roa (raw, json)
Hash identifier:          Mi9/wrzYFqL2/FvDr0xcpCcfjE6L/fR0FK3GbHbvn4M=
Subject key identifier:   E4:09:60:37:58:E4:52:83:3E:0F:1A:47:75:64:3E:35:DC:11:DD:1A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B684E0EB6D58F0C56A000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3aee3545-8ea1-350c-8306-fefeeb50bccd.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:68:4e:0e:b6:d5:8f:0c:56:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=f8271f8f-71ac-4344-b253-1368ffd6fb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:e8:e0:c6:2e:82:c1:80:77:d9:77:01:60:
                    5b:65:5d:a3:40:4b:a6:1e:88:a1:aa:06:2c:b0:92:
                    13:e1:b8:4f:1b:42:32:ed:31:af:15:02:ed:e6:61:
                    c4:a0:0b:57:23:db:dc:15:c8:1b:f1:70:9d:6b:4a:
                    9c:5a:17:32:81:30:c9:ec:3a:78:2d:e9:cc:a1:f5:
                    e7:8e:63:4f:d4:7e:4c:70:60:9e:9b:c0:71:fe:f7:
                    66:3d:ce:27:0e:be:ab:31:aa:26:47:4a:e8:8f:d0:
                    b0:90:b7:c4:35:74:46:34:66:d6:5d:81:8a:fd:b3:
                    1a:db:39:4d:f6:c7:18:65:bd:77:ba:67:e9:cc:69:
                    1a:fb:80:f7:a4:1f:49:ef:4e:e9:53:0c:8f:4f:29:
                    2a:af:c6:4e:04:e1:a1:d5:69:88:45:73:21:d5:b3:
                    41:20:b1:47:8c:e7:a3:10:72:32:60:9a:3a:05:32:
                    43:b2:81:94:27:d3:b6:f7:92:60:eb:44:0f:fb:3a:
                    f6:25:37:59:58:2a:8c:cc:02:15:83:44:3b:1e:ab:
                    7f:9d:ac:e0:f1:87:ee:ec:0c:1e:2b:bf:c2:71:9b:
                    ba:34:e5:bc:4f:a3:6a:2e:93:b0:8d:81:34:14:08:
                    53:c1:02:b0:cf:6e:7b:e7:92:ba:3a:09:e2:34:d5:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:60:37:58:E4:52:83:3E:0F:1A:47:75:64:3E:35:DC:11:DD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3aee3545-8ea1-350c-8306-fefeeb50bccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:b3:1e:18:16:47:48:73:81:6c:51:16:33:e7:1c:d4:9a:
         15:c7:30:5a:0a:60:68:56:d2:48:c3:b7:6f:35:20:65:35:5c:
         8d:b5:0e:f3:7c:6f:78:0a:0d:bd:c8:7a:f1:52:9f:47:a1:9f:
         24:55:c8:48:f4:7f:a6:90:42:1e:84:2c:bd:b7:e2:59:7e:6b:
         0f:fa:da:23:f8:72:b3:de:c0:40:f7:be:ef:8b:e0:c6:67:d6:
         6f:93:16:c1:0b:03:c2:8a:5c:2a:59:34:d8:24:13:11:46:71:
         c4:bd:cd:c8:04:5e:3e:73:1a:8f:6a:10:0b:21:5d:62:de:60:
         83:c2:d8:bd:a4:bb:6e:bd:ef:b9:1c:38:39:aa:f0:eb:3b:42:
         ac:f2:ee:08:b0:c2:0f:59:64:6b:8e:94:67:93:e8:33:c9:3b:
         f7:ed:9e:0e:7b:84:80:37:0e:a1:e0:12:e8:87:75:e4:8a:d1:
         36:9a:4c:68:1a:93:a8:7e:8f:b4:b2:a6:ce:25:c4:a9:5f:f8:
         a3:7d:ec:81:99:b7:73:a1:e0:1d:54:15:9d:2e:12:8c:11:63:
         83:40:60:bb:5d:5e:81:7a:f3:e1:7b:c6:66:64:80:b4:ad:e8:
         52:5d:4e:87:39:f6:17:70:d4:38:33:43:ed:e7:0e:1a:81:e6:
         39:bc:c5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:36 2025 by rpki-client